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Amendment to the Claims : 

This listing of claims replaces all prior versions, and 
listings, of claims in the application: 

1. (Currently Amended) A method comprising: 
generating information, at first and second points of a 

network, about unwanted communications passing through the first 
and second points from a source and directed to a target device, 
the unwanted communications being that arc adapted to reduce the 
ability of the a target device to respond to other 
communications ; and 

analyzing the information generated at the first and second 
points to identify which of the points first carried the 
unwanted communications. 

2. (Original) The method of claim 1, also including 
detecting the direction of the unwanted communications . 

3. (Original) The method of claim 1, also including 
identifying the target device. 

4. (Original) The method of claim l, also including 
statistically analyzing the communications to determine if an 
uncharacteristically large number of communications have passed 
through at least one of the network points. 

3 
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5. (Original) The method of claim l, also including 
statistically analyzing the communications to determine when an 
uncharacteristically large number of communications have been 
targeted toward the target device. 

6. (Original) The method of claim 1, also including 
correlating communications request messages with acknowledgement 
messages . 

7. , (Original) The method of claim 1, also including 
communicating information about the unwanted communications to 
brokers. 

8. (Original) The method of claim 7, also including 
communicating information about the unwanted communications 
among brokers. 

9. (Original) The method of claim 1, also including 
blocking a portion of communications passing through the point 
through which the unwanted communications originated, 

10. (Original) The method of claim 9, also including 
blocking a portion of communication request messages passing 
through the point through which the unwanted communications 
originated. 



; 4 
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11. (Original) The method of claim 1, in which the target 
device comprises a web server. 

12. (Currently Amended) A method comprising: 
monitoring communications passing through at least a firat 

point and a second point on a path from a source sub-network to 
a target device; 

analyzing the communications passing through the first and 
second points for indicia of unwanted communi cat ions; 

identifying the ^ source sub-network as originating e£ 
unwanted communications that are adapted to reduce the ability 
of a target device on a network to respond to other 
communications, the source sub-network connected to the network 
through an interface device associated with the first of the at 
least a first point and a second point that carried the unwanted 
communications ; and 

blocking communications passing through the interface 
device . 

13. (Original) The method of claim 12, also including 
blocking a portion of the communications passing through the 
interface device, 

14. (Original) The method of claim 13, also including 
blocking a portion of communication request messages passing 
through the interface device, i 

i 
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15 . (Canceled) . 
IS . (Canceled) . 

17. (Currently Amended) jThe method of claim 12£, also 
including statistically analyzing the communications passing 
through the first and second points for an uncharacteristically 

large number of communications passing through either point. 

1 

18. (Currently Amended)! The method of claim 12£, also 
including statistically analyzing the communications passing 
through the first and second points for an uncharacteristically 
large number of communication jrequest messages passing through 
either point . 



19. (Currently Amended) !The method of claim 12-&, also 

including correlating communidation request messages passing 

1 

though the first and second polints with acknowledgement 
messages . 

20. (Currently Amended) A system comprising: 

first and second interface devices for detecting and 
generating information about unwanted communications from a 
source passing through the first and second interface devices 
mcaoagco directed to a targjet device; and 



a communications analyizerj for analyzing the information 

'i ! 

generated at the first and .jsecbnd interface devices to identify 



i! ! 



o 
o 
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which of the interface devices first carried the unwanted 
communications, :j | 

■ i 

21. (Original) The *s}rste|m of claim 20, in which the 

'! : 

communications analyzer al&o includes : 

\ '• 

an interface monitor corresponding to each interface 

i i 

device ; and 

': ' 
•• ■ 

a communications link iibetween the interface monitors. 

rn 

22. (Original) The s^rstejm of claim 21, in which the C/> 

; t 
/ i 

communications analyzer also includes a statistics analyzer 

j 

corresponding to each interface device for statistically 

;[ j 

analyzing the messages that pajss ; through each interface device. 

i i 
i 

i; j 

23. (Original) The system of claim 22, also including an 
interface coordinator assoqiatjed : with each interface device for 
instructing the interface devi'ces to block messages. 

i \ 
'\ \ 

24. (Currently Amendeld) !A. system comprising.- 
a communications monitor jfor detecting and generating 

information about unwanted ^mesjsages originating on a first 

network and directed to a t!arg|et device on a second network , the 

=i — 

; : ! 

!! : 

communications monitor comgorisling : 



o 
o 
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l! . ! 



a plurality of interface, monitors between the first 



network and the second nebilori for monitoring the passage of 



:i ,i 



unwanted messages therethroug h; . 

■j i 

a localizer coupled I to , the plurality of interface 

|! ! 

monitors to identify the netwbrk : point that first carried the 

; i i 

un want e d messages; and ;j i ; 

i| i ' : 

;! i ; 

a gating module for blocking messages passing through the g^J 

I I 

network point identified by the localizer from the first network 



i i 

i i 

! ! 

i i 



to the second network. 

25. (Canceled) . 

26. (Canceled) . 

27. (Currently Amended) [The system of claim 24-6, in which 



l i 

i ! 



S 



the communications monitor 



rn 

O 
O 



|alsjo includes a statistics analyzer 



• « ! i i 

for statistically analyzing the messages passing through the 
plurality of points. 



i! I 



28. (Original) The syjstejm of claim 24, in which the gating 

module is operable to block! a portion of the messages passing 

■i | 

from the first network to tijhe isecpnd network. 

;! ■ I . 

29, (Original) The syjstejm of claim 28, in which the gating 
module is operable to blockj a percentage of all messages passing 
from the first network to tjjhe Lecbnd network. 



8- 
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30. (Original) The system of claim 28, in which the gating 

i 

module is operable to block a | portion of communication request 

jj ■; 

messages directed to the target device. 



31. (Currently Amended) A computer program embodied in a 



computer readable medium, the 

computer to: !! 

i! 

I; 

generate information, jiat 



program capable of configuring a 



first and second points of a 
network, about unwanted coritmmlcations from a source passing 
through the first and second points directed to a target device 



that are adapted to reduce 



jthej ability of the & tar-get device to 



respond to other communicatjiioris; and 

analyze the information generated at the first and second 

jj 

points to identify which o^ the points first carried the 
unwanted communications. jj 

i| 

32. (Original) The program of claim 31, alBo capable of 

li 

|| 

configuring a computer to hjlock a portion of the communications 



passing through the point tihat 

ji 
jj 

communications. 



first carried the unwanted 



33. (Currently Amendejd) A computer program embodied in a 
carrier wave, the program dja'paale of configuring a computer to: 

generate information, 'at first and second points of a 
network, about unwanted coitjnunk cat ion's from a source passing 

i 

through the first and secorifl ppiiits directed to a target device 
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the ability of the a target device to 



and 



[g]012 



respond to other communications; 

jj ; 

analyze the information generated at the first and second 

I ■ ; 

pointB to identify which o^ the joints first carried the 



unwanted communications. 



34. (Original) The program: of claim 33, also capable of 



4 . 



configuring a computer to 



passing through the point that! first carried the unwanted 
communications - 



ilo< 



k 3 portion of the communications 
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O 

o 



' J 



id 



PAGE 12117 * RCVD AT 81212005 7:55:02 PM [Eastern Daylight Time] * SVR:USPTO-EFXRF-6/27 * DNIS:2738300 * CSID:8586785099 * DURATION (mm-ss):05J4 



